On Sun, Oct 17, 2021 at 7:45 PM Maik Heinelt <[email protected]> wrote:
I am trying to get the LDAP extension to work with our Guacamole 1.3 installation. MySQL authentication is working just fine, but LDAP doesn't show up. I did install our Windows AD server with the LDAP addon, installed the v1.3 LDAP .jar extension and also added the configuration at guacamole.properties as explained at this [ https://guacamole.apache.org/doc/gug/ldap-auth.html | manual. ] But when I login as user guacadmin and check the user, there is no LDAP tab and also no LDAP user. This is expected - unless you sign in with an LDAP users, you will not see the LDAP tab, any LDAP groups, or LDAP users. This is because the LDAP extension uses the LDAP username and password to do any/all LDAP searches (with the exception of the initial search), so a database user will not have access. There are two ways around this: * Manually create a matching user in the database for one of the LDAP users and assign it administrative privileges. * Enable automatic JDBC account creation and then assign the auto-created user account(s) whatever privileges required. -Nick Hi Nick, thank you for the quick reply. I tried to login with several AD users, but login fails. For testing, I have allowed the users OU to be able to login at Guacamole, but since I don't know any log where I can actually see if the LDAP search actually works, it is difficult for me to debug if the issue is in Guacamole or maybe at the communication with the AD. Maik
